Wednesday, 2016-06-01

*** thorst has joined #openstack-ansible00:07
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: DOC New Appendix - custom component layouts  https://review.openstack.org/32234400:09
*** sawblade_ has quit IRC00:11
*** sawblade6 has joined #openstack-ansible00:12
*** sacharya has quit IRC00:15
*** retreved_ has quit IRC00:16
*** retreved has joined #openstack-ansible00:17
*** retreved has quit IRC00:17
*** ggillies has joined #openstack-ansible00:27
*** sdake_ has joined #openstack-ansible00:29
*** sdake has quit IRC00:30
*** alikins has joined #openstack-ansible00:37
*** kylek3h has joined #openstack-ansible00:41
*** smatzek has quit IRC00:42
*** kylek3h has quit IRC00:49
*** Fr0Master is now known as FroMaster00:53
*** sdake has joined #openstack-ansible00:56
*** sdake_ has quit IRC00:59
*** sdake has quit IRC01:02
*** asettle has joined #openstack-ansible01:08
*** asettle has quit IRC01:13
*** sacharya has joined #openstack-ansible01:15
*** klamath has quit IRC01:15
*** klamath has joined #openstack-ansible01:16
*** sacharya has quit IRC01:21
*** kylek3h has joined #openstack-ansible01:33
*** elopez has joined #openstack-ansible01:37
*** kylek3h has quit IRC01:40
*** kylek3h has joined #openstack-ansible01:40
*** sdake has joined #openstack-ansible01:41
*** sdake has quit IRC01:43
*** sdake has joined #openstack-ansible01:47
*** sdake_ has joined #openstack-ansible01:48
*** kylek3h has quit IRC01:49
*** klamath has quit IRC01:50
*** klamath has joined #openstack-ansible01:50
*** sdake has quit IRC01:51
*** klamath has quit IRC01:53
*** klamath has joined #openstack-ansible01:54
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: Remove unneeded playbook vars  https://review.openstack.org/32363002:05
*** sacharya has joined #openstack-ansible02:16
*** thorst has quit IRC02:20
*** thorst has joined #openstack-ansible02:21
*** thorst has quit IRC02:29
*** kylek3h has joined #openstack-ansible02:30
*** thorst has joined #openstack-ansible02:35
*** kylek3h has quit IRC02:37
*** thorst has quit IRC02:37
*** Qiming has quit IRC02:43
openstackgerritMerged openstack/openstack-ansible: Clarify static route requirements check  https://review.openstack.org/32347202:58
*** Qiming has joined #openstack-ansible03:23
*** kylek3h has joined #openstack-ansible03:26
*** kylek3h has quit IRC03:31
*** thorst has joined #openstack-ansible03:38
*** thorst has quit IRC03:46
*** albertcard has quit IRC04:07
*** jamielennox is now known as jamielennox|away04:08
*** kylek3h has joined #openstack-ansible04:18
*** david-lyle has quit IRC04:21
*** kylek3h has quit IRC04:25
*** sguduru has joined #openstack-ansible04:31
*** thorst has joined #openstack-ansible04:44
*** thorst has quit IRC04:51
*** chhavi has joined #openstack-ansible05:08
*** kylek3h has joined #openstack-ansible05:13
*** saneax_AFK is now known as saneax05:19
*** kylek3h has quit IRC05:20
*** prometheanfire has quit IRC05:20
*** asettle has joined #openstack-ansible05:24
*** asettle has quit IRC05:28
*** javeriak has joined #openstack-ansible05:44
*** thorst has joined #openstack-ansible05:49
*** sdake has joined #openstack-ansible05:52
*** sdake_ has quit IRC05:55
*** thorst has quit IRC05:57
*** aslaen has quit IRC06:03
*** kylek3h has joined #openstack-ansible06:07
*** sdake has quit IRC06:15
*** kylek3h has quit IRC06:15
*** asettle has joined #openstack-ansible06:16
*** asettle has quit IRC06:21
*** markvoelker has quit IRC06:24
*** berendt has joined #openstack-ansible06:26
openstackgerritMichael Davies proposed openstack/openstack-ansible: Add lxc as a dependency for all Ubuntu hosts  https://review.openstack.org/32367806:46
*** xavpaice has left #openstack-ansible06:59
*** yatin has joined #openstack-ansible06:59
openstackgerritMichael Davies proposed openstack/openstack-ansible: Add lxc1 as a dependency for all Ubuntu hosts  https://review.openstack.org/32367807:04
*** Matias has quit IRC07:04
*** kylek3h has joined #openstack-ansible07:04
*** javeriak has quit IRC07:08
*** yatin has quit IRC07:09
*** kylek3h has quit IRC07:09
*** javeriak has joined #openstack-ansible07:12
*** thorst has joined #openstack-ansible07:14
*** jiteka has joined #openstack-ansible07:16
*** Matias has joined #openstack-ansible07:18
*** mikelk has joined #openstack-ansible07:21
*** thorst has quit IRC07:22
*** jiteka has quit IRC07:24
*** bryan_att has joined #openstack-ansible07:25
*** pcaruana has joined #openstack-ansible07:26
evrardjpgood morning everyone07:33
*** karimb has joined #openstack-ansible07:35
Bofu2Umorning evrardjp07:35
*** xek has joined #openstack-ansible08:01
*** raddaoui has quit IRC08:07
*** cristicalin has joined #openstack-ansible08:10
*** yatin has joined #openstack-ansible08:16
*** yatin has quit IRC08:16
*** thorst has joined #openstack-ansible08:20
*** yatin has joined #openstack-ansible08:21
*** admin0 has joined #openstack-ansible08:25
*** thorst has quit IRC08:27
*** electrofelix has joined #openstack-ansible08:36
*** markvoelker has joined #openstack-ansible08:37
*** markvoelker has quit IRC08:42
*** saneax is now known as saneax_AFK08:44
*** sacharya has quit IRC08:57
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Correct nova admin endpoint version  https://review.openstack.org/32373608:59
*** prometheanfire has joined #openstack-ansible09:11
pjm6good morning09:13
pjm6evrardjp, o/09:13
odyssey4meo/09:13
pjm6odyssey4me, o/09:13
Bofu2Ufingers crossed on my rebuild09:14
Bofu2Uhere we go09:14
* odyssey4me holds Bofu2U's beer09:14
Bofu2UI just did the galera bootstrap with my custom inventory file and it succeeded so09:15
*** yatin has quit IRC09:15
openstackgerritMerged openstack/openstack-ansible-plugins: Provide type for boolean module parameters  https://review.openstack.org/32358809:15
pjm6guys i have another doubt about haproxy09:20
*** asettle has joined #openstack-ansible09:20
pjm6to make it work, i must first configure the controllers nodes to have an interface that will be connected to DMZ network, right?09:21
evrardjpBofu2U: good news09:21
evrardjpgood morning pjm609:21
pjm6evrardjp, o/ :D09:21
evrardjppjm6: yes09:22
*** asettle has quit IRC09:22
pjm6ok, so that will be a interace and not a bridge09:22
evrardjpyou can chose09:23
evrardjpit doesn't make a difference09:23
evrardjpI mean haproxy runs on an IP only, so it doesn't care about the interface09:23
evrardjpbind*09:23
pjm6but when I do external_lb_vip_address09:23
pjm6I don't specify which interface will it bind09:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add RabbitMQ mgmt UI through HAProxy  https://review.openstack.org/31767509:24
evrardjpkeepalived needs a proper interface09:24
pjm6or i must manually configure the interface to fetch that IP?09:24
pjm6yeah thats my doubt, because idk which interface should use to keepalived09:24
evrardjpso it could be a bridge or an ethernet interface09:24
pjm6but keepalived must be in a different interface from DMZ network, right?09:24
evrardjpnope09:25
*** thorst has joined #openstack-ansible09:25
evrardjpI mean09:25
admin0pjm6, in my case:   haproxy_keepalived_external_vip_cidr: "10.11.12.3/22"  <newline> haproxy_keepalived_internal_vip_cidr: "172.29.236.3/22"  <newline> haproxy_keepalived_external_interface: "eth0"    <newline> haproxy_keepalived_internal_interface: "br-mgmt"09:25
evrardjpyou'd probably run keepalived on multiple sides of your network, the external and the internal09:25
admin0so you can specificy the ip as well as interface09:25
evrardjpin fact, you must configure the IP and the interface09:27
pjm6hmmm thanks evrardjp, admin0 :)09:27
evrardjpyw09:27
pjm6so i must specify the IP that i will use, right?09:27
pjm6and only one will have the IP09:27
evrardjpyes09:27
evrardjpspecify the IP you want to be a VIP09:27
evrardjpin each of the networks09:28
evrardjpso for admin0 example you have node1 with ip 10.11.12.1 (ext ip) + 172.29.236.1 (int ip) and node 2 with 10.11.12.2 (ext ip) + 172.29.236.2 (int ip). Your vip could be the 10.11.12.3 (ext ip) + 172.29.236.3 (int ip)09:29
openstackgerritMerged openstack/openstack-ansible-security: Adding audit rule for SELinux policy modifications  https://review.openstack.org/31943809:29
evrardjpin the admin0 example*09:30
openstackgerritMerged openstack/openstack-ansible-security: Add /etc/apparmor.d/ for auditing  https://review.openstack.org/31992209:30
pjm6ohh i see it :D very thanks evrardjp09:30
pjm6and admin0, will try use it09:31
evrardjpthe vip will then be balanced on the node, and if arrives on node 1, you'll see on node 1 on the external interface the 2 ips: the normal one (.1) and the vip (.3)09:31
pjm6btw: do you have recommended way to segment ips?09:31
pjm6with containers i don't have idea for each node, what ips are needed09:31
evrardjpv6 or v4?09:31
pjm6v409:32
*** thorst has quit IRC09:32
evrardjpdo what you want, really :D09:32
admin0pjm6:  the architecture i follow is here: https://www.openstackfaq.com/openstack-private-cloud-architecture/09:32
evrardjptake spot where there is left :D09:32
admin0i keep it the same09:32
pjm6my problem is if i need to do reip09:32
pjm6will be problem xD09:32
pjm6and all baremetals nodes must have vxlan, and storage network?09:33
admin0if possible, keep it uniform .. so that you can use any node as any thing09:33
pjm6ok, i was using that09:33
pjm6but had afraid of being bad practice09:34
evrardjppjm6: make your life easier and make everything standard09:34
pjm6but that will be easy in order to identify09:34
pjm6yeah, i'm doing it as in the docs, every node had a IP in all interfaces (except br-vlan)09:34
admin0i start server names @ c11 ..  so they go from c11 - c99 ..     same IP from .11 to 99 ..09:34
admin0so  11 12 13 can be conrollers   21 21 xx be network   31 32 storage   41 42 swift     51+ compute09:35
admin0so know exactly where how09:35
admin0and 1 is always gateways09:35
admin02 - 9 is load balancer, one off thigns etc09:35
pjm6so you reserve the first 100 ips in the containers net09:35
*** saneax_AFK is now known as saneax09:35
admin0yes09:35
admin0but its /22, so you can even reserve the first /2409:36
admin0and it will auto-use the rest 3 24 subnets09:36
admin0upto you09:36
pjm6yeah, that seems reasonable :)09:36
admin0based on deployments and growth .. if one off , demo, small .. 1-50 is reserved09:36
*** yatin has joined #openstack-ansible09:36
pjm6it will be small at first, but thinking in the future09:42
pjm6i will reserve at least more09:42
*** asettle has joined #openstack-ansible09:43
*** jamielennox|away is now known as jamielennox09:44
*** cristicalin has quit IRC09:46
*** admin0 has quit IRC09:47
*** kylek3h has joined #openstack-ansible09:47
openstackgerritAlexandra Settle proposed openstack/openstack-ansible-specs: [WIP] DOCS: Overhaul installation guide  https://review.openstack.org/32347109:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Remove AIO cache resolver configuration  https://review.openstack.org/32376609:49
openstackgerritAlexandra Settle proposed openstack/openstack-ansible-specs: [WIP] DOCS: Overhaul installation guide  https://review.openstack.org/32347109:50
*** admin0 has joined #openstack-ansible09:50
*** kylek3h has quit IRC09:53
*** fishcried has joined #openstack-ansible09:54
*** fishcried has quit IRC09:55
*** asettle has quit IRC09:57
*** sacharya has joined #openstack-ansible09:57
admin0  /22 has 1024 addresss .. you can reserve 100 without worrying09:58
Bofu2Udammit, it's trying to use the LB IP which isn't setup yet for pip.09:59
admin0Bofu2U: which is why I always run haproxy playbook first :)09:59
admin0befoer anythign else09:59
Bofu2Uadmin0 I like your style09:59
Bofu2Ubrb09:59
*** sacharya has quit IRC10:03
*** Qiming has quit IRC10:06
*** johnmilton has quit IRC10:11
openstackgerritMerged openstack/openstack-ansible: Remove unneeded playbook vars  https://review.openstack.org/32363010:13
Bofu2Udoh. still error'd out on it.10:15
Bofu2Uthanks, though admin010:15
*** asettle has joined #openstack-ansible10:29
*** thorst has joined #openstack-ansible10:29
*** admin0 has quit IRC10:30
*** thorst has quit IRC10:38
*** admin0 has joined #openstack-ansible10:40
admin0are the IPs up and working ?10:40
*** kylek3h has joined #openstack-ansible10:41
Bofu2Uyeah10:42
Bofu2UI think I may have gotten it though, because the repo portions weren't running yet10:42
*** smatzek has joined #openstack-ansible10:43
Bofu2UI did a rm on ~/.pip/ on the nodes10:43
Bofu2Ulooks like it took care of it10:43
*** chhavi has quit IRC10:44
odyssey4meBofu2U yeah, makes sense to do that10:44
Bofu2Unow it's creating all of the containers ... fingers crossed10:47
*** kylek3h has quit IRC10:48
*** yatin has quit IRC10:52
evrardjpodyssey4me: how do I add a pip package for the repo build process that isn't a "*requires_pip_package"? I'm not sure how I have to do this, because it's not really an extra index I'm looking for, and I'd rather not have a new requirements file10:56
evrardjpsorry if that question has already been asked many times10:56
odyssey4meevrardjp is it a pip package, or a git source?10:57
evrardjppip package from pypi10:57
evrardjpbut not in the current requirements from any openstack project10:57
evrardjpI guess that's what plumgrid did10:58
evrardjpI thought about override the packages like *_requires_pip_packages, but I guess it's really what I'm looking for10:59
odyssey4meas I recall it's possible to have it built into the repo by just adding <something>_pip_packages into user_variables.yml: http://docs.openstack.org/developer/openstack-ansible/developer-docs/extending.html#build-the-environment-with-additional-python-packages10:59
evrardjplike what's documented here http://docs.openstack.org/developer/openstack-ansible/mitaka/developer-docs/extending.html#build-the-environment-with-additional-python-packages10:59
evrardjp"D11:00
odyssey4me<something>_requires_pip_packages adds it to the host for a service11:00
evrardjp:D *11:00
evrardjpyes11:00
evrardjpthat's what I wanted to avoid11:00
odyssey4meit's best added to the role in question's pip_packages list though, so that it gets installed intot he venv appropriately11:00
evrardjpI would prefer building it in the repo but not build it into the host11:01
odyssey4meany roles in /etc/ansible/roles will be read11:01
evrardjpthat's what I thought, but is that read for the repo_build?11:01
odyssey4meevrardjp yep11:01
evrardjpok that's the code I'm looking for11:02
odyssey4methe locations to look in for <something>_<optional_something>_pip_packages is set in the pkg_locations var: https://github.com/openstack/openstack-ansible/blob/master/playbooks/repo-build.yml#L43-L4711:02
evrardjpthanks!11:03
evrardjpok now I know how to properly override for my case :D11:03
evrardjpthanks again11:03
Bofu2Uit passed galera and is on repo_build, so far so good. /me keeps fingers crossed11:06
*** weshay has joined #openstack-ansible11:08
*** javeriak has quit IRC11:15
*** javeriak has joined #openstack-ansible11:15
*** Qiming has joined #openstack-ansible11:18
*** yatin has joined #openstack-ansible11:31
*** yatin has quit IRC11:32
*** kylek3h has joined #openstack-ansible11:34
openstackgerritMerged openstack/openstack-ansible: Add RabbitMQ mgmt UI through HAProxy  https://review.openstack.org/31767511:35
*** yatin has joined #openstack-ansible11:36
*** thorst has joined #openstack-ansible11:41
*** kylek3h has quit IRC11:42
*** retreved has joined #openstack-ansible11:43
*** sguduru has quit IRC11:43
*** yatin has quit IRC11:47
*** johnmilton has joined #openstack-ansible11:48
*** chhavi has joined #openstack-ansible11:48
*** sacharya has joined #openstack-ansible11:54
*** sacharya has quit IRC11:59
mhaydenmornin'12:04
mhaydenand happy wednesday12:04
*** schwicht has joined #openstack-ansible12:05
*** schwicht_ has joined #openstack-ansible12:07
odyssey4memhayden FYI https://review.openstack.org/32382512:08
*** woodard has joined #openstack-ansible12:09
mhaydenodyssey4me: ah, thanks for that12:09
*** schwicht has quit IRC12:09
*** woodard has quit IRC12:09
*** woodard has joined #openstack-ansible12:10
*** javeriak has quit IRC12:11
*** fignew has quit IRC12:13
*** schwicht_ has quit IRC12:13
*** openstackgerrit has quit IRC12:18
prometheanfiremhayden: hi, why do you get up so early?12:18
*** schwicht has joined #openstack-ansible12:18
*** openstackgerrit has joined #openstack-ansible12:18
mhaydenprometheanfire: you tell me do things and i done runnin'12:18
prometheanfiremhayden: also, backport https://review.openstack.org/32365412:18
prometheanfirelol12:19
prometheanfireI'll need to do the liberty one too, but since it's liberty I'll have to do it manually, not cherry pick12:20
prometheanfireand I'm on the road today (again) so I'll do that tonight12:20
mhaydenah yes, you must "liberate" the patch12:20
*** admin0 has quit IRC12:20
prometheanfireyes12:20
odyssey4memhayden better that libertifying it :p12:21
prometheanfireso much better12:21
prometheanfirewe could call it b3rnard0fying it12:21
*** Zucan has quit IRC12:22
prometheanfirewell, cya12:22
*** markvoelker has joined #openstack-ansible12:24
mhaydenasettle: nice work on the spec12:34
*** psilvad has joined #openstack-ansible12:34
*** admin0 has joined #openstack-ansible12:34
asettlemhayden: no problem. It's still drafting, I need Darren to include some more information. Did I answer your question fully? I apologise, I kind of wrote it in a rush thinking I had more time this mroning.12:34
mhaydennah, that makes sense12:36
mhaydeni missed the point there a little12:36
asettleNo worries mhayden :)12:38
asettleIf you have ideas, or questions, or things you think that would be beneficial, please pipe up. Interested in definitely making this a community effort and the doc to obviously benefit the community members.12:38
*** mkrish004c has joined #openstack-ansible12:39
*** kylek3h has joined #openstack-ansible12:40
*** Arshad has joined #openstack-ansible12:42
*** schwicht has quit IRC12:43
*** mkrish004c has quit IRC12:43
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Search for unlabeled device files  https://review.openstack.org/31944812:43
*** schwicht has joined #openstack-ansible12:45
*** Arshad has quit IRC12:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add /etc/apparmor.d/ for auditing  https://review.openstack.org/32384612:50
mhayden323845 and 323846 are super easy one line backports. ;)12:50
automagically_Morning all12:51
odyssey4meafk for a bit12:51
*** schwicht has quit IRC12:52
*** javeriak has joined #openstack-ansible12:58
*** klamath has quit IRC13:00
Bofu2Uautomagically_ mornin13:00
*** klamath has joined #openstack-ansible13:00
*** admin0 has quit IRC13:03
openstackgerritAlexandra Settle proposed openstack/openstack-ansible-specs: [WIP] DOCS: Overhaul installation guide  https://review.openstack.org/32347113:03
*** schwicht has joined #openstack-ansible13:03
*** messy has joined #openstack-ansible13:08
*** admin0 has joined #openstack-ansible13:09
*** sdake has joined #openstack-ansible13:09
*** stelouie has joined #openstack-ansible13:13
*** Ashana has joined #openstack-ansible13:14
*** TheIntern has joined #openstack-ansible13:16
*** automagically_ has quit IRC13:23
*** kylek3h has quit IRC13:25
*** kylek3h has joined #openstack-ansible13:26
*** deadnull_ has joined #openstack-ansible13:29
*** alextricity25 has joined #openstack-ansible13:31
*** alextricity25 has quit IRC13:32
*** alextricity25 has joined #openstack-ansible13:33
*** sdake has quit IRC13:34
*** kylek3h has quit IRC13:35
*** smatzek has quit IRC13:39
*** schwicht has quit IRC13:40
*** alextricity25_ has joined #openstack-ansible13:43
*** alextricity25 has quit IRC13:43
*** Zucan has joined #openstack-ansible13:47
*** automagically has joined #openstack-ansible13:48
evrardjpmorning automagically13:48
openstackgerritChristian Berendt proposed openstack/openstack-ansible-security: Remove one more "FAILED" from a custom fail message  https://review.openstack.org/32389213:48
*** KLevenstein has joined #openstack-ansible13:50
*** klamath has quit IRC13:54
*** klamath has joined #openstack-ansible13:54
*** sdake has joined #openstack-ansible13:55
*** automagically has quit IRC13:55
*** fignew has joined #openstack-ansible13:55
*** sacharya has joined #openstack-ansible13:56
*** deadnull_ has quit IRC13:56
*** klamath has quit IRC13:56
*** klamath has joined #openstack-ansible13:57
*** ametts has joined #openstack-ansible13:58
*** yatin has joined #openstack-ansible14:00
*** sacharya has quit IRC14:00
*** Zucan has quit IRC14:00
*** michaelgugino has joined #openstack-ansible14:00
openstackgerritMerged openstack/openstack-ansible: DOCS: Clarify guidance for deploy hosts  https://review.openstack.org/32228114:02
*** Zucan has joined #openstack-ansible14:03
*** deadnull_ has joined #openstack-ansible14:03
*** smatzek has joined #openstack-ansible14:04
*** yatin has quit IRC14:04
*** kylek3h has joined #openstack-ansible14:06
*** BjoernT has joined #openstack-ansible14:08
openstackgerritAndy McCrae proposed openstack/openstack-ansible-ironic: [WIP] Add 16.04 support  https://review.openstack.org/32337214:09
*** chhavi has quit IRC14:12
*** kylek3h has quit IRC14:14
*** berendt has quit IRC14:18
openstackgerritAndy McCrae proposed openstack/openstack-ansible-ironic: Add 16.04 support  https://review.openstack.org/32337214:21
*** spotz_zzz is now known as spotz14:24
*** raddaoui has joined #openstack-ansible14:26
*** alextricity25_ is now known as alextricity2514:28
andymccrodyssey4me: how do i get the xenial gate added to the ironic repo?14:28
andymccri think it should pass now14:28
*** zerda2 has joined #openstack-ansible14:28
*** ametts has quit IRC14:28
*** yatin has joined #openstack-ansible14:28
*** yatin has quit IRC14:30
*** aslaen has joined #openstack-ansible14:30
*** Mudpuppy has joined #openstack-ansible14:31
*** Mudpuppy has quit IRC14:32
*** Mudpuppy has joined #openstack-ansible14:33
spotzandymccr: check experimental or check xenial in the comments?14:34
*** kstev has joined #openstack-ansible14:34
andymccrspotz: ahh ok cool14:35
andymccrthanks!14:35
spotzwelcome14:35
*** deadnull_ has quit IRC14:41
*** jiteka has joined #openstack-ansible14:41
*** ametts has joined #openstack-ansible14:42
*** zerda2 has quit IRC14:43
*** flaviodsr has joined #openstack-ansible14:47
*** mfisch has joined #openstack-ansible14:48
*** mfisch has quit IRC14:48
*** mfisch has joined #openstack-ansible14:48
*** jiteka has quit IRC14:48
*** aslaen has quit IRC14:50
*** javeriak has quit IRC14:51
michaelguginoI thought we moved xenial into the default checks as nv14:51
andymccrmichaelgugino: it seems not, i think we probably should though - as we're adding support for each repo now14:52
*** automagically has joined #openstack-ansible14:53
*** karimb has quit IRC14:58
*** karimb has joined #openstack-ansible14:58
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: RFC1034/5 hostname upgrade  https://review.openstack.org/32303314:59
michaelguginough, these container builds for xenial are a mess15:00
michaelguginols: cannot access '/var/lib/lxc/LXC_NAME/rootfs/etc/ssh/sshd_config': No such file or directory15:01
michaelguginono ssh server installed by default, wtf15:01
*** kylek3h has joined #openstack-ansible15:01
andymccrmichaelgugino: thats not specific to xenial unfortunately15:01
Bofu2Uwhere does nova keep the list of instances on the local machine - /openstack/instances/?15:02
andymccrthat happens for 1 of 2 reaosns i've seen - either the apt-mirrors are messed so sshd isn't installed on the container15:02
andymccror the resolv.conf isn't correct (so it couldn't install ssh server)15:02
andymccrthe resolv.conf should be copied over though, from the host, but i had one instance earlier that wasn't copying it over. havn't seen it again since though15:02
*** yatin has joined #openstack-ansible15:02
andymccr(resolv.conf in the container so like /var/lib/lxc/LXC_NAME/rootfs/etc/resolv.conf)15:03
michaelguginothis is happening during the cache create step15:03
michaelguginomsg: Destination /var/lib/lxc/LXC_NAME/rootfs/etc/ssh/sshd_config does not exist !15:03
andymccrmichaelgugino: yeah exactly15:04
andymccrit basically does a chroot /var/lib/lxc/LXC_NAME/rootfs15:04
andymccrand then runs some commands15:04
*** pcaruana has quit IRC15:04
andymccrone of which is like an apt-get update etc15:05
andymccrso if it can't connect to the mirror the apt-get update doesn't work, and the apt-get install openssh-server doesn't work, so the ssh config doesn't exist.15:05
*** weezS has joined #openstack-ansible15:05
michaelguginoyeah, but I feel that script should exit non-zero if that is the case15:06
michaelguginobut it lists that step as changed/ok15:06
andymccrmichaelgugino: yeah it probably should - that would make more sense15:06
*** asettle has quit IRC15:06
*** kylek3h has quit IRC15:08
Bofu2Ugah looks like the galera data didn't come back after the cluster went up.15:12
Bofu2Udammit.15:13
michaelguginoandymccr: looks like you're right.  I'm seeing a failure to resolve us.archive.ubuntu.com with verbose output15:13
michaelguginoresolv.conf is nonsense15:13
andymccrmichaelgugino: you got it also? its weird because it should get copied from the host15:15
andymccrbut mine wasn't15:15
*** asettle has joined #openstack-ansible15:15
andymccrmy resolve.conf was like 10.0.3.1 in the container15:15
andymccrbut correct on the host15:15
andymccr*resolv.conf rather15:15
michaelguginoyeah, I'm getting something similar15:15
andymccrso im really not sure why it isn't copying that file over properly15:15
michaelguginonameserver 10.0.3.115:15
andymccrhttps://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/vars/ubuntu-16.04.yml#L5115:16
andymccrso it should get copied over15:16
michaelguginowe should be setting +e on that bash script15:17
michaelguginoor -e15:17
andymccrso its not really a script, its an rsync command: https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/tasks/lxc_cache_preparation.yml#L25-L32 (for the copy)15:18
andymccrbut it looked like it copied over the other files (like /etc/resolvconf for example)15:19
*** yatin has quit IRC15:21
michaelguginolxc_container_cache_files is an empty list in that role15:22
michaelguginoperhaps there was some sort of regression15:22
michaelguginothe rsync bit, lxc_cache_map.copy_from_host is also not defined in role15:23
andymccrmichaelgugino: it should be - its in the vars for specific distros15:24
andymccrmine was at least rsyncing the other bits (like /etc/resolvconf)15:24
michaelguginooh, I see now, it's a dictionary, duh15:25
michaelguginothe rsync command appears to accomplish nothing on 16.0415:27
*** Qiming has quit IRC15:28
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-openstack_hosts: Updated the hostname generation  https://review.openstack.org/32350415:30
michaelguginoandymccr: /var/lib/lxc/LXC_NAME/rootfs/etc/resolv.conf -> ../run/resolvconf/resolv.conf15:30
michaelguginoI think that is our problem right there.  It's copying a link, not actually the contents of the file15:30
michaelguginoI'm going to test this and cut a patch15:31
*** yatin has joined #openstack-ansible15:31
*** admin0 has quit IRC15:32
*** permalac has joined #openstack-ansible15:32
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: RFC1034/5 hostname upgrade  https://review.openstack.org/32303315:33
*** TheIntern has quit IRC15:33
andymccrmichaelgugino: ahh that makes sense15:34
andymccrgood catch15:34
michaelgugino:)15:34
*** sacharya has joined #openstack-ansible15:34
andymccrmichaelgugino: can we add a -L to copy the file rather than the symlink?15:35
andymccrim concerned that perhaps on some instances it isn't a link (which would explain why gates are still working)15:35
andymccrrsync -L15:35
michaelguginoI think by just adding that file, it will cover all cases15:36
*** Ashana has quit IRC15:36
michaelguginowe'll see :_)15:36
michaelguginoplus, I don't want to change the behavior of the container, which might make troubleshooting down the road more difficult if the rest of the world has a link to a different file.15:37
andymccrmichaelgugino: true but if /etc/resolv.conf is the file we want, then we want to copy that file rather than the link15:37
andymccri think a -L should copy the linked file e.g. /etc/resolv.conf if its not a link, or the linked file if it is15:38
michaelguginoandymccr: the problem, I think, is if the resolv daemon is updating /run/resolvconf instead of /etc/resolv.conf, then the container won't get updated dns when it actually boots15:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rsyslog_client: Add CentOS7 support to rsyslog client  https://review.openstack.org/32009915:39
andymccrahh ok yeah i see15:39
michaelguginoit's going to get different entries from the lxc bridge after the container is started, I believe.15:39
michaelguginookay, that change seems to work locally, I'm going to cut a quick patch15:40
*** TheIntern has joined #openstack-ansible15:40
andymccrperhaps we should remove the link file altogether and hten copy over the hosts resolv.conf?15:40
michaelguginoI'm not sure.  Again, I am thinking that the daemon is updating /run/resolvconf/resolv.conf and if we get rid of the link, then /etc/resolv.conf won't get updated15:43
michaelguginoso anything that relies on /etc/resolv.conf directly (I'm guessing legacy applications) won't work correctly.15:43
michaelguginothe /run directory is relatively new in the linux standard base15:44
michaelguginomost likely the gate checks are working because the containers already have some software baked-in in that environment for speed purposes.15:45
*** berendt has joined #openstack-ansible15:46
michaelguginohmm, no, that doesn't seem to be the case either in this instance15:47
openstackgerritweezer su proposed openstack/openstack-ansible: Add the integration testing for horizon.  https://review.openstack.org/32354815:50
*** mikelk has quit IRC15:54
michaelguginoI see there is something for removing /run/resolvconf in the gate env, but I don't see anything about that in the actual roles or plays.15:54
*** sdake has quit IRC15:54
*** kylek3h has joined #openstack-ansible15:55
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Refactor run-playbooks  https://review.openstack.org/30858415:56
cloudnullodyssey4me: ping15:57
*** TheIntern has quit IRC16:02
*** sguduru has joined #openstack-ansible16:02
*** kylek3h has quit IRC16:03
*** galstrom_zzz is now known as galstrom16:03
*** chris__hultin is now known as chris_hultin16:04
openstackgerritMerged openstack/openstack-ansible-security: Remove one more "FAILED" from a custom fail message  https://review.openstack.org/32389216:06
errrI have a custom dashboard for horizon that isnt part of any openstack project. What is the best way to deploy that into an OSA environment?16:08
*** Ashana has joined #openstack-ansible16:09
*** Ashana has quit IRC16:09
palendaeerrr, If it extends Horizon, then I do have an example16:10
errrpalendae: what do you mean by extends?16:11
palendaeerrr, Adds a new page instead of replacing16:11
errryes, its a new dashboard with its own panels16:11
palendaehttps://github.com/rcbops/rpc-openstack/tree/master/rpcd/playbooks/roles/horizon_extensions is the role which installs this repo https://github.com/rcbops/horizon-extensions16:12
errrsweet, thanks16:12
palendaeThe rpc-openstack project is layered on top of OSA, so the concept is pretty much the same16:12
*** Ashana has joined #openstack-ansible16:12
errrwell as it happens this would be for an rpc customer :)16:12
*** sacharya has quit IRC16:13
stevellepalendae: does this need to go into 'extending' in developer docs?16:14
stevelle(someday)16:14
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova: Improve deployment performance on large clusters  https://review.openstack.org/32400316:14
openstackgerritMerged openstack/openstack-ansible-security: Add /etc/apparmor.d/ for auditing  https://review.openstack.org/32384616:16
*** zhangjn has quit IRC16:17
*** sdake has joined #openstack-ansible16:19
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rsyslog_client: Add CentOS7 support to rsyslog client  https://review.openstack.org/32009916:19
*** zhangjn has joined #openstack-ansible16:19
*** sdake has quit IRC16:23
*** stelouie_ has joined #openstack-ansible16:24
*** stelouie has quit IRC16:27
*** michaelgugino has quit IRC16:29
openstackgerritMerged openstack/openstack-ansible-os_keystone: Cleanup/standardize usage of tags  https://review.openstack.org/31925216:31
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: RFC1034/5 hostname upgrade  https://review.openstack.org/32303316:31
*** sdake has joined #openstack-ansible16:32
palendaestevelle, Probably not a bad idea16:33
palendaeOr a generic horizon extension role maybe16:33
*** stelouie_ has quit IRC16:38
palendaeI know this is a WIP, but if someone has time to glance over it and provide thoughts, I'd appreciate it. I'm not totally confident in the implementation and would appreciate ideas https://review.openstack.org/#/c/323601/16:40
openstackgerritMerged openstack/openstack-ansible-security: Docs: Update dev notes for Cat 3 controls  https://review.openstack.org/31890516:40
*** admin0 has joined #openstack-ansible16:47
*** kylek3h has joined #openstack-ansible16:50
*** alextricity25 has quit IRC16:50
*** Ashana has quit IRC16:51
*** alextricity25 has joined #openstack-ansible16:52
*** kylek3h has quit IRC16:58
*** jamesdenton has joined #openstack-ansible17:04
openstackgerritMerged openstack/openstack-ansible: Remove AIO cache resolver configuration  https://review.openstack.org/32376617:04
*** deadnull_ has joined #openstack-ansible17:05
*** kylek3h has joined #openstack-ansible17:06
*** admin0 has left #openstack-ansible17:08
*** alextricity25_ has joined #openstack-ansible17:09
*** alextricity25 has quit IRC17:09
*** admin0 has joined #openstack-ansible17:11
*** michaelgugino has joined #openstack-ansible17:14
*** sacharya has joined #openstack-ansible17:15
*** zhangjn has quit IRC17:17
*** asettle has quit IRC17:17
*** asettle has joined #openstack-ansible17:18
*** zhangjn has joined #openstack-ansible17:18
michaelguginoodyssey4me: you around?17:18
*** stelouie has joined #openstack-ansible17:21
*** saneax is now known as saneax_AFK17:22
openstackgerritMichael Gugino proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in xenial  https://review.openstack.org/32403417:28
*** cloader89 has joined #openstack-ansible17:31
*** yatin has quit IRC17:33
michaelguginonvm17:36
*** metral is now known as metral_zzz17:38
*** electrofelix has quit IRC17:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone  https://review.openstack.org/32021617:44
*** zhangjn has quit IRC17:49
*** javeriak has joined #openstack-ansible17:49
*** zhangjn has joined #openstack-ansible17:51
*** alikins has quit IRC17:51
*** sguduru has quit IRC17:52
*** deadnull_ has quit IRC17:54
*** javeriak_ has joined #openstack-ansible17:55
*** javeriak has quit IRC17:56
*** alikins has joined #openstack-ansible18:00
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_nova: WIP Implement Xenial Support  https://review.openstack.org/32404518:01
*** michaelgugino has quit IRC18:02
openstackgerritMerged openstack/openstack-ansible: Correct nova admin endpoint version  https://review.openstack.org/32373618:04
*** albertcard has joined #openstack-ansible18:04
*** cloudtrainme has joined #openstack-ansible18:05
weezSi got an error message when i went to build up a aio by gate-check-commit.sh18:06
weezSTASK: [lxc_hosts | Adjust sshd configuration in container] ********************18:06
weezSfailed: [aio1] => (item={'regexp': '^PermitRootLogin', 'line': 'PermitRootLogin yes'}) => {"failed": true, "item": {"line": "PermitRootLogin yes", "regexp": "^PermitRootLogin"}, "rc": 257}18:06
weezSmsg: Destination /var/lib/lxc/LXC_NAME/rootfs/etc/ssh/sshd_config does not exist !18:06
weezSim on the master branch18:07
weezSdid i miss something to run the script?18:08
cloudnullweezS: maybe the base image cache existed before the playbook run ?18:10
cloudnullwe're not seeing that error in the gate.18:10
weezSsorry whats that?18:10
weezSim using a new vm instance, just did the apt-get update and apt-get install git.18:11
cloudnullwas responding to your question aboiut the image bits18:11
cloudnullweezS: this is on ubuntu 14.04 ?18:11
weezSyep18:12
mhaydenaren't we building a cached image and creating a tar.xz now?18:12
mhaydenin the lxc-hosts role?18:12
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Skip unavailable hosts when distributing keys  https://review.openstack.org/32405018:12
cloudnullmhayden: we are18:18
cloudnullweezS: I've not seen that issue.if you can track it down and log an issue it'd be appreciated.18:18
weezSokk18:19
weezSim wondering it’s a issue or i just misconfiged somehitng18:19
cloudnullwhy not both :)18:19
weezSmay i know whats the LXC_NAME?18:20
weezS[u'rsync', u'-a', u'/etc/apt/sources.list', u'/var/lib/lxc/LXC_NAME/rootfs/etc/apt/sources.list']18:20
weezSOH NVM18:21
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Search for unlabeled device files  https://review.openstack.org/31944818:22
*** TheIntern has joined #openstack-ansible18:25
*** metral_zzz is now known as metral18:29
*** aslaen has joined #openstack-ansible18:34
*** jamesdenton has quit IRC18:40
*** cloudtrainme has quit IRC18:44
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rsyslog_client: Add CentOS7 support to rsyslog client  https://review.openstack.org/32009918:45
cloudnullanyone around that may want to review and give a nudge to https://review.openstack.org/#/c/323504/18:46
*** TheIntern has quit IRC18:46
cloudnullalso reviews on https://review.openstack.org/#/c/323033/ would be appreciated.18:46
*** jamesdenton has joined #openstack-ansible18:48
spotzcloudnull: looking18:50
*** TheIntern has joined #openstack-ansible18:50
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible: RFC1034/5 hostname upgrade  https://review.openstack.org/32303318:54
*** admin0 has quit IRC18:55
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible-openstack_hosts: Updated the hostname generation  https://review.openstack.org/32350418:57
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: DOC New Appendix - custom component layouts  https://review.openstack.org/32234418:57
spotzsorry cloudnull:)18:57
cloudnull++ spotz thanks :)18:57
*** hybridpollo has joined #openstack-ansible19:00
*** alextricity25_ has quit IRC19:00
*** karl907 has joined #openstack-ansible19:01
*** hybridpolio has joined #openstack-ansible19:02
*** alextricity25_ has joined #openstack-ansible19:04
*** Zucan has quit IRC19:04
*** hybridpollo has quit IRC19:06
*** saneax_AFK is now known as saneax19:10
*** admin0 has joined #openstack-ansible19:14
*** TheIntern has quit IRC19:14
*** permalac has quit IRC19:30
*** schwicht has joined #openstack-ansible19:43
*** aslaen has quit IRC19:47
*** alextricity25_ is now known as alextricity2519:49
*** javeriak_ has quit IRC19:58
*** karl907 has quit IRC19:58
*** david-lyle has joined #openstack-ansible20:05
*** KLevenstein has quit IRC20:07
*** karimb_ has joined #openstack-ansible20:09
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Search for unlabeled device files  https://review.openstack.org/31944820:09
*** johnmilton has quit IRC20:10
*** karimb has quit IRC20:12
*** jamesdenton has quit IRC20:12
*** aslaen has joined #openstack-ansible20:19
*** jamesdenton has joined #openstack-ansible20:19
*** smatzek has quit IRC20:26
*** jamesdenton has quit IRC20:35
*** schwicht has quit IRC20:35
*** stelouie_ has joined #openstack-ansible20:36
*** jamesdenton has joined #openstack-ansible20:37
*** stelouie_ has quit IRC20:37
*** schwicht has joined #openstack-ansible20:38
*** alextricity25 has quit IRC20:39
*** stelouie has quit IRC20:40
*** Mudpuppy has quit IRC20:44
*** jamesdenton has quit IRC20:44
*** sdake has quit IRC20:49
*** david-lyle has quit IRC20:51
openstackgerritMerged openstack/openstack-ansible-security: Search for unlabeled device files  https://review.openstack.org/31944820:53
*** johnmilton has joined #openstack-ansible20:59
*** david-lyle has joined #openstack-ansible21:01
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Add conditional for overlay network settings  https://review.openstack.org/27379321:06
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible: Add conditional for overlay network settings  https://review.openstack.org/27379321:08
openstackgerritMerged openstack/openstack-ansible-os_keystone: Skip unavailable hosts when distributing keys  https://review.openstack.org/32405021:12
*** galstrom is now known as galstrom_zzz21:16
*** evilt0ne has quit IRC21:21
*** schwicht has quit IRC21:26
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in xenial  https://review.openstack.org/32403421:30
cloudnullweezS / raddaoui ^ that was the cause of Newton breakage w/ lxc container cache creates.21:31
cloudnullCores: while https://review.openstack.org/#/c/324034 is not a gate blocking fix it is something that needs to be fixed for greenfield deployments of master.21:32
*** kylek3h has quit IRC21:32
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in xenial  https://review.openstack.org/32403421:33
*** kylek3h has joined #openstack-ansible21:34
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in trusty/xenial  https://review.openstack.org/32403421:35
cloudnullsorry for the spam21:36
cloudnullupdating the commit message.21:36
cloudnullraddaoui spotz weezS21:36
*** kylek3h has quit IRC21:36
*** kylek3h has joined #openstack-ansible21:36
*** kylek3h has quit IRC21:36
*** kylek3h has joined #openstack-ansible21:37
spotzcloudnull: np21:37
cloudnullIf any cores are around review on https://review.openstack.org/#/c/324034 would be greatly appreciated.21:38
*** kylek3h has quit IRC21:42
*** v1k0d3n has quit IRC21:45
*** admin0 has quit IRC21:46
*** admin0 has joined #openstack-ansible21:47
*** sdake has joined #openstack-ansible21:50
*** galstrom_zzz is now known as galstrom22:00
*** admin0 has quit IRC22:00
*** sdake_ has joined #openstack-ansible22:00
*** david-lyle has quit IRC22:01
*** sdake has quit IRC22:03
mrdaMorning all22:07
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in trusty/xenial  https://review.openstack.org/32403422:15
cloudnullmorning mrda22:15
*** david-lyle has joined #openstack-ansible22:16
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in trusty/xenial  https://review.openstack.org/32403422:18
cloudnull^ sorry once again for the spam.22:19
*** johnmilton has quit IRC22:19
*** cloader89 has quit IRC22:20
*** sdake_ has quit IRC22:21
*** thorst has quit IRC22:23
*** thorst has joined #openstack-ansible22:30
*** kylek3h has joined #openstack-ansible22:30
*** jahshuah has joined #openstack-ansible22:30
phschwartzmhayden: is it normal for openstack-ansible-security to kill all cron's?22:30
*** ametts has quit IRC22:30
*** sdake has joined #openstack-ansible22:31
*** jahshuah has quit IRC22:32
*** darrenc is now known as darrenc_afk22:32
*** johnmilton has joined #openstack-ansible22:33
*** thorst has quit IRC22:34
mrdao/22:35
*** kylek3h has quit IRC22:37
*** spotz is now known as spotz_zzz22:39
*** darrenc_afk is now known as darrenc22:39
*** aludwar has quit IRC22:40
*** weezS has quit IRC22:41
*** aludwar has joined #openstack-ansible22:41
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in trusty/xenial  https://review.openstack.org/32403422:42
cloudnull^ different gate images, different outcome... but that should take care of it.22:42
*** retreved has quit IRC22:42
*** intr1nsic has quit IRC22:43
*** aludwar has quit IRC22:45
*** messy has quit IRC22:45
*** aludwar has joined #openstack-ansible22:45
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Fix missing /run/resolvconf/resolv.conf in trusty/xenial  https://review.openstack.org/32403422:45
*** intr1nsic has joined #openstack-ansible22:45
cloudnullon that note, im out have a good one folks22:45
*** sacharya has quit IRC22:45
*** alikins has quit IRC22:48
*** thorst has joined #openstack-ansible22:50
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: Introduce a playbook for deploying Gnocchi  https://review.openstack.org/32412522:50
*** aslaen has quit IRC22:53
*** thorst has quit IRC22:54
*** berendt has quit IRC22:59
*** aslaen has joined #openstack-ansible23:03
*** Qiming has joined #openstack-ansible23:09
*** aslaen has quit IRC23:10
*** kylek3h has joined #openstack-ansible23:24
*** kylek3h has quit IRC23:32
*** v1k0d3n has joined #openstack-ansible23:40
*** phschwartz has quit IRC23:52
*** sdake_ has joined #openstack-ansible23:54
*** phschwartz has joined #openstack-ansible23:56
*** sdake has quit IRC23:58
*** david-lyle has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!